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APPARATUS, SYSTEM, AND METHOD FOR VALIDATING NETWORK 

COMMUNICATIONS DATA 



CROSS-REFERENCE TO RELATED APPLICATIONS 



The present application claims priority to U.S. provisional applications 
5 60/177,463, filed January 20, 2000; 60/178,987, filed January 28, 2000; and 60/180,072, 
filed February 3, 2000, each of which are hereby incorporated by reference. 



and more particularly to a method and system for the validation of information on a 
10 communications network. 



information processing. A computer operating system enables and facilitates users to access 
and operate computer information technology. Somewhat like how automobile operator 

15 interfaces (e.g. steering wheels and gearshifts) facilitate the access and operation of 

automobile resources and functionality, computer user interfaces facilitate (e.g. windows and 
cursors) the access and operation of computer hardware and operating system resources and 
functionality. Graphical user interfaces such as the Apple Macintosh Operating System or 
Microsoft's Windows 98 provide a baseline and means of accessing and displaying 

20 information. Such consumer oriented operating systems enable users to access and operate 
computer information technology by providing an integrated user interface. Other operating 
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FIELD 



The present application relates generally to computer systems and software, 



BACKGROUND 



Typically, users (i.e. people or other systems) engage computers to facilitate 
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systems such as Unix do not provide integrated graphical user interfaces and instead allow 

various interfaces to be employed such as command line interfaces (e.g. C-shell) and 

graphical user interfaces (e.g. X windows). 

The proliferation and expansion of computer systems, databases, the Internet, 

5 and particularly the World Wide Web (the web), have resulted in a vast and diverse 

collection of information. Various user interfaces that facilitate the interaction of people with 

computer systems are currently in use. Tim Berners-Lee originally developed an information 

navigation interface called WorldWideWeb.app, i.e. the web, in late 1990 on NeXT 

Computer Inc.'s operating system, NeXTSTEP, at the European Organization for Nuclear 

10 Research (CERN, a particle physics center). Subsequently, information navigation 

interfaces, i.e. web browsers, have become widely available on almost every computer 
operating system platform. 

Generally, the web is the manifestation and result of a synergetic 
interoperation between user interfaces (e.g. web browsers), servers, distributed information, 

15 protocols, and specifications. Web browsers were designed to facilitate navigation and 
access to information, while information servers were designed to facilitate provision of 
information. Typically, web browsers and information servers are disposed in 
communication with one another through a communications network; i.e. information servers 
typically provide information to users employing web browsers for navigating and accessing 

20 information about the web. Microsoft's Internet Explorer and Netscape Navigator are 

examples of web browsers. In addition, navigation user interface devices such as WebTV 
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have also been implemented to facilitate web navigation. Microsoft's Information Server 

and Apache are examples of information servers. 

Information on the web typically is provided through and distributed 

employing a HyperText Markup Language (HTML) specification. HTML documents are 

5 also commonly referred to as web pages. HTML documents may contain links to other 

HTML documents that can be traversed by users of web browsers (i.e. user interfaces) by 

selecting the links, which are commonly highlighted by color and underlining. HTML has 

been extended and upgraded resulting in new standards such as Extensible Markup Language 

(XML) and other such variants, which provide greater functionality. HTML's progenitors 

10 were Standardized General Markup Language (SGML), which in turn was preceded by the 
General Markup Language (GML). SGML is generally regarded as a more functional 
superset of HTML and first appeared in 1980 as a draft by the Graphic Communications 
Association (GCA) to the American National Standards Institute (ANSI) (GCA 101-1983); it 
was adopted as an international standard by the International Standards Organization (ISO) in 

15 1986 (ISO 8879:1986). Charles Goldfarb, Edward Mosher, and Raymond Lorie invented the 
GML at IBM to facilitate law office information system integration and improve document 
processing. GML itself was inspired by William Tunnicliffe, chairman of the CGA, during a 
presentation on the topic of "the separation of the information content of documents from 
their format" at the Canadian Printing Office in September, 1967. 

20 HTML documents typically are accessed through navigation devices via a 

HyperText Transfer Protocol (HTTP). HTTP is a stateless application-level protocol for 
distributed, collaborative, hypermedia information systems, and is further described on the 
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W3C web site entitled HTTP Specifications and Drafts (available at 

www.w3.org/Protocols/Specs.html). Microsoft's Information Server allows the tracking of a 
state with a built-in session object. 

The basic web browsing paradigm presents users with a scrolling page full of 
5 text, pictures, and various other forms of information media such as movies and links to other 
documents. Web browsers allow users to access uniquely identified HTML documents on 
the web by entering a navigation location in a Universal Resource Locator (URL) and 
employing HTTP as a transfer protocol to provide and obtain web pages. Typically, a user 

2 provides the address of a desired HTML document into a URL (either directly or through the 
4 1 0 selection of links in an already viewed HTML document). 

Q The onset of the web has brought on a tremendous increase in transactions 

i occurring through insecure communications networks such as the Internet. Sending 

, information through such networks allows for the possibility of data corruption. Database 

^ systems and other transactional systems benefit from the validation of data. Increasingly, 

y ~ ™~ ■ — ' ■ ■ ■ — — — 

3 1 5 such transactions occur via web page forms. In many instances, it is critical that data 

J 

acquired over a communications network be acquired in a consistent, predictable, and 
reliable way. Otherwise, a host of problems may result such as failed transactions, 
application errors, incorrect orders, irritated customers, and other such consequences. 
Validation is a way to increase the reliability of data sent over a 
20 communications network. Existing validation techniques are commonly employed to ensure 
the integrity of data against incidents such as transmission disruptions or erroneous data 
entry. Existing validation logic includes, for example, pattern matching logic to ensure 
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obtained data is in a proper form, and check sum techniques to ensure against data 

corruption. 

The most common way to perform validations on a form has been to write a 
multitude of small Javascript 1.0 functions that are downloaded to the client and then called 
right before a form is submitted. The validating logic was imbedded into the web page itself. 
A more recent and generic technique was developed to validate data from a form by 
describing the validations for each field and its dependencies and then calling generic 
validation procedures. The validation procedures are provided in an included file. 
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SUMMARY 

As set forth below, a need exists for an improved apparatus, system, and 
method for improved validation of information across a communications network. Existing 
systems have the disadvantage of putting validation logic in a script into a web page resulting 
in an excess amount of validation logic that had to be downloaded with each page. Also, 
existing systems require the custom handling and development of validation logic on a per 
web page basis, thus greatly burdening and hindering development. Attempts to improve 
existing systems have failed to reduce the amount of validation logic downloaded by a user 
client, forcing them to download sometimes larger validation procedures in included files. 
Furthermore, the calling of validation procedures from an include file (i.e. a file, in this case 
containing large collections of validation logic, for wholesale inclusion) has not significantly 
improved development as the increasing number of exceptions require custom handling 
outside of common validation procedures. 

The present application advances the art by providing a common validation 
rules library that may be accessed and executed either by a client or server. The present 
application advances the art by providing a minimal amount of logic either to the client or the 
server by generating only a requisite amount of validation logic. Furthermore, the present 
application improves development by allowing developers to reuse and build upon validation 
logic. 

In one embodiment, the present system includes an apparatus, comprising: a 
memory device having at least one region for storing executable program code; and a 
processor, disposed in communication with the memory device, for executing the program 
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code stored in the memory device. The program code further comprises code to receive 

information over a communications network, code to retrieve validation rules from a rules 

library, and code to determine data validity by applying the retrieved validation rules to the 

information. 

5 In another embodiment, the present system involves an apparatus, comprising: 

a memory device having at least one region for storing executable program code; and a 
processor, disposed in communication with the memory device, for executing the program 
code stored in the memory device. The program code further comprises code to provide 
validation rules from a rules library, and code to validate information with provided 
10 validation rules. 

In other embodiments, the present system involves (1) code to provide a rules 
library, and code to build validation rules by subclassing members of a rules library class 
hierarchy, (2) code to mark data types for associated validation rules, and code to provide 
validation marked data types, and/or (3) code to identify browser capability, code to choose 



15 improved validation deployment, code to provide appropriate network location and 

validation rules, code to obtain information from user, and code to validate information with 
appropriate validation rules. 



20 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The accompanying drawings illustrate certain embodiments of the application. 

Figure 1 illustrates a centralized controller according to one embodiment of 
the present application; 

Figure 2 illustrates another embodiment of the present application in the form 
of a distributed system interacting through a communications network; 

Figure 3 illustrates another embodiment of the system and various 

interactions; 

Figure 4 illustrates web pages, hypertext, reference and proximal links; 
Figure 5 is a flowchart illustrating a validator refinement system; 
Figure 6 is a flowchart illustrating an improved validation chooser system; 
Figure 7 is a flowchart illustrating an improved client validator; 
Figure 8 is a flowchart illustrating an improved server validator; 
Figure 9 is a flowchart illustrating one embodiment of a validation rules 
inheritance hierarchy. 
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DETAILED DESCRIPTION 

Figure 1 shows one embodiment of a system incorporating the present 

application. In this embodiment, the system includes a centralized controller 1101 

configured to receive information from one or more users from user input device(s) 1114. 

5 Also, the centralized controller may receive information from a communications network 

1115 through its input/output (I/O) facility 1 105, preferably, via a network interface 1 107. 
The I/O facility is capable of both receiving and sending information. Peripheral devices 

1116 may be attached to the centralized controller for any number of purposes including, but 
not limited to: printers for output, scanners for input, additional or alternative storage devices 

10 for data storage and retrieval, network interfaces for communication, and devices of the like. 

A typical centralized controller may be based on common computer systems 
that may include, but are not limited to, components such as: a central processing unit (CPU) 
1 104, random access memory (RAM) 1 103, read only memory 1 102, and a local storage 
device 1 108. The CPU is electronically coupled to each of the central controller's other 

15 elements. The CPU comprises at least one high-speed data processor adequate to execute 
program modules for executing user or system-generated requests. These modules are 
described in Figures 2 through 9. Preferably, the CPU is a conventional microprocessor such 
as the Intel Pentium Processor. The CPU interacts with RAM, ROM, and storage device(s) 
to execute stored program code according to conventional data processing techniques. 

20 The local storage device may contain modules. These modules may include, 

but are not limited to, a network communications data validator (NCDV) 1 109, a user 
interface 1 1 10, an operating system 1 1 1 1, a web browser 1112, an information server 1 106, 
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and a database 1113. These modules may be stored and accessed from the local storage 

device(s) or from storage devices accessible through I/O. Although these modules typically 

and preferably are stored in a local storage device, they may also be stored in ROM, RAM, 

peripheral devices or in remote storage facilities through a communications network. 

The operating system is executable program code enabling the operation of a 
centralized controller. The operating system facilitates access of storage devices, I/O, 
network interfaces devices, peripheral devices, etc. The operating system preferably is a 
conventional product such as a Unix operating system or Microsoft Windows NT. The 
operating system, once executed by the CPU, interacts with ROM, RAM, I/O, peripheral 
devices, user input devices, storage devices, communications networks, program modules, 
and data, et al. Preferably, the operating system includes communication protocols that allow 
the centralized controller to communicate with other entities through a communications 
network. The preferable protocol is TCP/IP . 

Figure 2 shows another embodiment of a system incorporating the present 
application. In this embodiment, the centralized controller 1101 embodiment of Figure 1 has 
been decentralized into components: a user interface controller 2201 or alternatively a user 
interface device 2202, a network communications data validator controller 2203, a web 
browser controller 2204, a database controller 2205, and an information server controller 
2206. 

A user interface controller is configured similarly to the centralized controller 
of Figure 1 except it does not require a database, NCDV, information server, or web browser. 
A user interface 21 10 is stored program code that is executed by the CPU. The user interface 
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is responsible for receiving either user or system-generated requests. The user interface 

device may be a telephone, a consumer electronics online access device (e.g. Phillips Inc.'s 

WebTV), PDA or the like. In alternative embodiments, a user interface device 2202 may 

take the place of or be used in conjunction with a user interface controller. 

5 In one embodiment, a centralized server 1 101 is configured as a web server, 

and conventional communications software such as Netscape Navigator web browser may be 

used to transmit a conditional purchase offer (CPO). In one embodiment, the CPO 

centralized server 1101 has a web page on the world wide web, allowing the buyer to provide 

information through the interface of the conventional web browser software. In one 

10 embodiment, the buyer selects the subject of the goods he wishes to purchase by selecting 
from a list of possible subjects. Subjects might include airline tickets, hotel rooms, rental 
cars, insurance, mortgages, clothing, etc. After the subject is selected, a form is displayed on 
a video monitor of a buyer interface. This form is. an electronic contract with a number of 
blanks to be filled out by the buyer, with each blank representing a condition of a CPO. 

15 An information server controller is configured similarly to the centralized 

controller of Figure 1 except it does not require a NCDV, database, web browser, or user 
interface. An information server 2106 is a software server that is stored program code that is 
executed by the CPU. Preferably, the information server is a conventional Internet 
information server such as Microsoft's Internet Information Server version 4.0. Preferably, 

20 the information server allows for the execution of program modules through facilities such as 
C++, Java, JavaScript, ActiveX, CGI scripts, ASP, or any like facility with regular 
expression (regex) abilities on the server side. An information server typically takes requests 
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from a web browser and provides results to a web browser; however, an information server 

can take requests from user interfaces as well. The information server may also take system 

requests. In alternative embodiments, a information server may be integrated into a user 

interface or vice versa, thus, combining the functionality of both. 

5 A network communications data validator controller is configured similarly to 

the centralized controller of Figure 1 except it does not require a database, web browser, 

information server, or user interface. The NCDV 2109 is stored program code that is 

executed by the CPU. A NCDV takes requests from a user interface and provides results to a 

user interface. The NCDV may also take system requests. In Figure 1 the NCDV is 

1 0 implemented within an information server, however, the NCDV may also be implemented 

independently and interact with an information server through provided APIs as illustrated in 

Figure 2 2106 and 2109. 

A database controller is configured similarly to the centralized controller of 

Figure 1 except it does not require a NCDV, web browser, information server, or user 



15 interface. A database(s) 21 13 is stored program code that is executed by the CPU and it is 
stored data processed by the CPU. A database takes requests from a NCDV and provides 
results to a NCDV. The database may also take system requests. In an alternative 
embodiment, a NCDV may be integrated into a database or vice versa, thus, combining the 
functionality of both. In yet another alternative embodiment, a NCDV may be integrated into 

20 a user interface or vice versa, thus, combining the functionality of both. 

A web browser controller is configured similarly to the centralized controller 
of Figure 1 except it does not require a NCDV, database, information server, or user 
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interface. A web browser 21 12 is stored program code that is executed by the CPU. 

Preferably, the web browser is a conventional hypertext viewing application such as 

Microsoft Internet Explorer or Netscape Navigator. Preferably, the web browser allows for 

the execution of program modules through facilities such as Java, JavaScript (preferably 

5 revision number 1 .2 or greater), ActiveX or any like facility with regular expression (regex) 

abilities. A web browser takes requests from a user interface and provides results to a user 

interface. The web browser may also take system requests. In alternative embodiments, a 

web browser may be integrated into a user interface or vice versa, thus, combining the 

functionality of both. 

10 The functionality of the user interface controller, network communications 

data validator controller, database controller, information server controller, and web browser 
controller may be combined in any number of ways to facilitate deployment. To accomplish 
this, one may simply copy the executable code, first ensuring it has been compiled for the 
appropriate CPU of the controller for which it is destined, and/or data onto local storage 

15 device of one of the various controllers. Similarly, the functionality of the user interface, 
NCDV, database, information server, and web browser may be combined in any number of 
ways to facilitate deployment. To accomplish this, one must simply integrate the 
components into one code base or in a facility that can dynamically load the components on 
demand in an integrated fashion. 

20 Figure 3 shows an overview of the basic interaction of the system. The 

information server 3106 acts as an in-between for: a user interface 31 10 on a system, a user 
interface device 3202, or a web browser 3112 taking requests. The information server can 
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make further requests of a NCDV 3109 that itself may access one or more databases or files 

such as a rules library. Both the information server and the NCDV may service multiple 

instances of any of the aforementioned. Also, there may be one or more instances of the 

NCDV and/or information server that may severally or jointly interact with one or more 

5 information servers 3106. NCDVs service information servers. In turn, the information 

servers and/or NCDVs may interact and service one or more databases 3113 for various 

purposes such as, but not limited to: validation rules, session state storage, and electronic 

commerce (E-commerce) order fulfillment. Figure 3 shows that the NCDV and information 

server may service multiple sources at once, and that the NCDV and information server may 

1 0 access more than one database. 

Figure 4 shows web pages 4401 with hypertext 4402 and reference links 4403 
at various navigation locations 4404. An originating navigation location 4404a references 
hypertext that may have initial reference links 4403a. These initial reference links are 
proximal links to the originating navigation location. 

1 5 One may view hypertext at an initial reference navigation location 4404b by 

traversing an initial reference link. The subsequent reference links 4403b found in the 
hypertext found at the initial reference navigation location are also proximal links, however, 
they are one reference less proximal (i.e. one "hop" away) to the originating navigation 
location. 

20 One may view hypertext at a subsequent reference navigation location 4404c 

by traversing a subsequent reference link. The further subsequent reference links 4403c 
found in the hypertext found at the subsequent reference navigation location are also 
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proximal links, however, they are two references less proximal (i.e. two "hops" away) to the 

originating navigation location. 

Figure 5 outlines a validator refinement system. Initially, a user, or even an 
automated system such as a web bot, navigates a communications network 5501, for example 
5 the Internet. Navigation typically occurs via a user interface, user interface device, or web 
browser. A user typically navigates by positioning a pointing element 4405 of Figure 4 by 
means of a positioning device such as, but not limited to, a mouse. Typically this is referred 
to as "surfing the Internet," "surfing the net," or simply "surfing." 

Web browsers and the like keep track of the navigation location they are 
10 visiting, and can provide this information to other facilities through various application 
program interfaces (API)s. Web browsers' may provide their name, revision, enabled and 
disabled features, similarly, through APIs; also, it is possible to determine relevant feature 
sets of almost any web browser from its name and revision number. 

Upon surfing to a navigation location with the ability to identify a web 



15 browser, the NCDV or the information server can thus identify web browser capabilities 
5502 through a provided API; for example, Javascript provides methods such as 
navigator.javaEnabled, navigator. appName, and navigator.appVersion for identifying the 
abilities, type and revision number of an employed web browser. Thus, a web page can be 
constructed to obtain such information, and may then further provide the NCDV or 

20 information server with the web browser identity. 

Upon having identified the web browser, overall performance may be 
improved by choosing an appropriate validation scheme 5503. Various web browsers have 
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equally varying capabilities that affect performance. By identifying web browser 

capabilities, the validator refinement system may determine which, among available, 

validation schemes are best. 

Upon having determined which validation scheme is best for the identified 
5 web browser, the validator refinement system provides the user with a navigation location at 
which web pages are tailored with the most appropriate validation schemes 5504. 

After the user navigates to the appropriate web page with appropriate 
validation scheme, the user may provide information into the web page 5505. In one 
embodiment, such provision of information is facilitated by employing web forms, however, 
10 other standard data processing techniques may also be used. 

Upon provision of information by the user, the appropriate validation scheme 
will validate the information 5506. 

Figure 6 outlines an improved validator chooser system, further explaining 
how an improved (i.e. regex enabled) validation scheme is chosen 5503 of Figure 5. Upon 



15 having identified the browser capability 5502 of Figure 5, the improved validator chooser 
system will determine, using standard data processing techniques, if the browser's supported 
languages, if any, support regex 6601. In one embodiment, this may be accomplished by 
embedding commands into a web page that will be executed upon users' traversal if their 
browser supports the processing of such commands. Any number of command types may be 

20 used including, but not limited to: Javascript, Active X, Java, and others of the like. In one 
embodiment, Javascript will be employed. 
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If users' browsers support regex, then their information provisions will be 

validated with an improved validator scheme on the client 6602; typically the client may take 

the form of a user interface such as, but not limited to a web browser (e.g. Netscape 

Navigator), or a user interface device (e.g. Phillips WebTV). Thus, the user will be provided 

with a network location 5504 of Figure 5 that employs an improved client validator scheme. 

However, if users' browsers do not support regex, and there is no other (non regex) language 

facility provided by the web browser 6603, then users' information will be validated with an 

improved validator scheme on the server 6605. Thus, the user will be provided with a 

network location 5504 of Figure 5 that employs an improved server validator scheme. If, 

however, users' browsers do not support regex, and there is a (non regex) language facility 

provided by the web browser 6603, then users' information will be validated with traditional 

validation techniques 6604; traditional validation techniques such as monolithic include files 

and non regex based validation via languages such as ActiveX Thus, the user will be 

provided with a n etwork location 5504 of Figure 5 that employs traditional validation 

schemes. 

Figure 7 outlines an improved client validator system, further explaining how 
an improved validation scheme is applied to user information on a client when a browser 
supports regex 6602 of Figure 6. Based on the abilities of users' web browsers, a web page 
is requested 7701 . The information server provides and/or generates the requested page 7702 
via standard web server techniques. 

Upon the improved client validator system's provision of the requested web 
page, the information server provides and/or generates validation code from a rules library. 
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This validation code is imbedded into the requested web page. Preferably this validation 

code is Javascript revision 1 .2 or greater, however, this code may be provided through other 

like facilities such as, but not limited to: Microsoft Visual Basic Script, Java applets, and 

others of the like. The information server provides rules from the rules library associated 

5 with web page field types; e.g. if the web page is marked as an airTravel type of page, a 

corresponding airTravel set of rules will be pulled from a rules library and imbedded into the 

requested web page 7703. Those skilled in the art will recognize that the "airTravel" 

notation denotes an object in objected-oriented development parlance; specifically objects are 

demarcated by concatenating multiple worlds without spaces, and capitalizing all 

10 concatenated words except for the first word. Ergo, "airTravel" might be an example of an 
object concerned with the validation of air travel data entry. 

Upon provision of the requested web page with the appropriate imbedded 
rules, the resulting web page is provided to the user 7704. Unlike with traditional techniques 

such as monolithic include files, only the validation logic required for the resulting web page 



;3 15 is provided. Typically this results in the user viewing the resulting page in their web browser 
with the appropriate rules activated. 

Upon provision of the resulting web page to the user, the user may provide 
information specific to the web page 7705. This information may be of any nature. 
Examples include, but are not limited to, order entry of information required to complete an 
20 online purchase of goods or services. Typically, the user simply enters information into 
provided fields. 
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As the user provides information, imbedded validation code validates the 

entries 7706. This validation may occur as the entry is being provided, or after a set of 

entries has been provided. 

If the provided user information is not valid 7707, then the current web page 
will identify invalid entries with an error message 7708. In one embodiment this is done by 
highlighting the invalid entries employing standard HTML modification techniques. After 
the invalid information is identified, the user may edit their entries 7705. 

Upon the user's provision of valid information 7707, the improved client 
validator will check if there are anymore entries required to complete an entry transaction 
7709. If there are more entries required, the user is provided with the next form web page 
7704. In one embodiment, all the rules and all the required web form sections are provided 
to the user in a single web page provision upon the first web page provision to the user 7704. 
Thus, subsequent cycling from 7707 to 7709 of multi-part web page forms require no 
interaction fr om an information server. Upon reaching the end of a web form 7709, the 
validated user information is posted to the information server 7710. In an alternative 
embodiment, validated user information is posted to the information server before the entry 
completion check 7709 and after the user's provision of valid information 7707. 

Figure 8 outlines an improved server validator system, further explaining how 
an improved validation scheme is applied to user information on a server when a browser 
does not support regex 6605 of Figure 6. Based on the abilities of a user's web browsers, a 
web page is requested 8801. Of course, as described in Figure 3 single and/or multiple users 
may make multiple uses of a single or multiple server validator systems. The information 
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server provides and/or generates the requested page 8802 via standard web server techniques. 

Typically this results in the user viewing the resulting page in their web browser. 

Upon the improved server validator system's provision of the requested web 

page, the user may provide information specific to the web page, thereafter posting their 

information to the information server 8803. This information may be of any nature. An 

Example includes, but is not limited to, the order entry of information required to complete 

an online purchase of goods or services. Typically, the user simply enters information into 

provided fields. 

Upon having posted the user information to the information server, the 
improved server validator system validates the user information 8804 by accessing a Riles 
library made available to the server. The rules library makes validation code available to the 
improved server validator. Preferably this validation code is Javascript revision 1.2 or 
greater, however, this code may be provided through other like facilities such as, but not 
limited to: Microsoft Visual Basic Script, Java applets, C++, and others of the like. 
Employing Javascript revision 1.2 or other such high level object oriented languages is 
believed to be preferable for savings in development time because a single development may 
be employed by both clients and servers, and furthermore inheritance techniques may be 
employed with greater facility. The information server provides rules from the rules library 
associated with web page field types; e.g. if the web page is marked as an airTravel type of 
page, a corresponding airTravel set of rules will be pulled from a rules library. However, 
unlike the improved client validator, no rules are imbedded into the web page. Instead, the 
rule code is executed on the server(s)' CPU(s). 
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If the provided user information is not valid 8805, then the current web page 

will identify invalid entries with an error message 8806. In one embodiment this is done by 

highlighting the invalid entries employing standard HTML modification techniques. Upon 

having modified the web page highlighting the errors, the information server provides the 

5 modified web page to the user 8802 and the user may edit their entries 8803. 

Upon the user's provision of valid information 8805, the improved server 

validator will check if there are anymore entries required to complete an entry transaction 

8807. If there are more entries required, the information server provides the user with the 

next form web page 8802. Thus, subsequent cycling from 8802 to 8807 of multi-part web 

10 pages are provided by the information server. Upon reaching the end of a web form 8807, 
the validated user information is posted to the information server 8808. In an alternative 
embodiment, validated user information is posted to the information server before the entry 
completion check 8807 and after the user's provision of valid information 8805. 

Figure 9 outlines a rules library system (i.e. rules library), further explaining 

15 how the improved validators (Figure 7 and Figure 8) perform validation. The rules library 
may be built with conventional development design tools; in one embodiment object oriented 
tools such as, but not limited to: Java, Javascript, C++, Objective C, and others of the like. 
However, one skilled in the art will recognize that any turing complete language and/or 
development environment may be alternatively employed. Preferably a language such as 

20 Javascript revision 1 .2 is employed as it may run both on clients and on the server without 
modification to the rules library allowing for greater code reuse. In the preferred 
embodiment, the rules library is a central repository of validation rules organized in a class 
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hierarchy as shown in Figure 9. However, the rules library in alternative embodiments may 

be organized as collection(s) of files, entries in a database, and/or other structures of the like. 

The class hierarchy is born from a parent 9901. A parent class may have children 9902. 

Children are born, i.e. subclassed, from their parent. In turn, the children may also be 

5 subclassed and have their own children 9903, 9904. Subclassing provides children with an 

inheritance. The parent may have certain attributes 9906a in the form of instance variables 

(or other such standard data processing facilities) and abilities 9907a in the form of methods 

(or other such standard data processing facilities). When a parent is subclassed, its child 

inherits all of its attributes and abilities. Furthermore, the child may further redefine itself 

10 from its parent with additional attributes 9906b and abilities 9907b. This class hierarchy 
lineage may be reflected by illustrating the inheritance source 9905. 

In one alternative embodiment, the validation rules may be associated with 
data types by marking data types with associated validation rules. Creating an association 
between data types (e.g. XML, web form fields, and or the like) and validation rules facilitate 

15 the application of validation rules upon a desired set of data. Creating the association 

reduces stress on computing resources by not having to first parse a web page to determine 
what types of validation rules ought to be applied. The creation of an association between 
data types and validation rules may be accomplished using standard data processing 
techniques such as, but not limited to: tagging web form elements by employing extensible 

20 markup language (XML) sheets. Associations with data types may be created by marking 
data types such as, but not limited to, fields with tags that may be used to locate and/or 
provide appropriate validation logic, i.e. an appropriate validation rule, from a rules library. 
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In another alternative embodiment, a parser may examine the structure and provide 

appropriate validation logic based on the parser's best guess of the data type. 

The provision of a rules library provides a single source for the improved 
client validator and the improved server validator for accessing validation rules. Although 
there may be a single rules library source, employing standard information technology, the 
rules library may be maintained in multiple locations for redundancy and performance 
purposes. A single source allows for the reuse of validation rules and thereby reduces 
development time. Also, allowing children to inherit from parent rules further reduces the 
time for developing new rules. For example, in Figure 9, travelRules 9902c inherits the 
ability to validate and encrypt 9907a various forms of customer information 9906a. Thus, 
when defining the new child, travelRules, there is no need to provide such attributes and 
abilities as they are automatically provided through inheritance. However, the travelRules 
child may further define departure and destination attributes 9906b and the ability to 
transform 9907b attributes; e.g. the ability to transform valid user time entries from a twelve 
hour time notation into a twenty- four hour notation or vice versa may be desirable. 
Furthermore, the child itself, travelRules, may be subclassed and further defined by 
airTravelRules adding more attributes 9906c such as class, windowSeat, etc. 

This rules library may be accessed by the information server through standard 
APIs employing standard data processing techniques. In one embodiment, web page forms 
are tagged with a type marker in HTML. These type markers will allow the information 
server to employ an associated rule. 
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It is to be understood that the embodiments and variations shown and 

described herein are merely illustrative of the principles of this application and that various 

modifications may be implemented without departing from the scope and spirit of the 

application. 
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